4399 matches found
OSV-2020-1474 Heap-buffer-overflow in dotnet_parse_com
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ 8 Crash state: dotnetparsecom dotnetload yrmodulesload...
OSV-2020-1464 Heap-buffer-overflow in dotnet_parse_com
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ 12 Crash state: dotnetparsecom dotnetload yrmodulesload...
OSV-2020-1436 Heap-buffer-overflow in dotnet_parse_com
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ 4 Crash state: dotnetparsecom dotnetload yrmodulesload...
PT-2020-21852
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details include a crash type of Heap-buffer-overflow READ 16, with a crash state...
dotnet: XML source markup processing remote code execution
It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...
Microsoft .NET Framework XML Processing Code Execution
The vulnerability of the Microsoft .NET Framework software platform, as well as the Microsoft Visual Studio development tools, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server, is related to errors in processing XML requests. Exploiting this vulnerability allows a malicious...
dotnet: XML source markup processing remote code execution
It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...
dotnet: XML source markup processing remote code execution
It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...
dotnet: XML source markup processing remote code execution
It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...
PT-2020-22583
Name of the Vulnerable Software and Affected Versions dotnet affected versions not specified Description The issue is related to a heap-buffer-overflow read. Technical details about the crash include the dotnet parse tilde 2, dotnet parse tilde, and dotnet parse com functions. Recommendations At...
OSV-2020-328 UNKNOWN READ in dotnet_parse_tilde_2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16448 Crash type: UNKNOWN READ Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...
PT-2020-22252
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state includes functions such as dotnet parse tilde 2, dotnet parse tilde, and dotnet parse...
PT-2020-22365
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of "Use-of-uninitialized-value". The crash state involves several functions: pe rva to offset, dotnet parse tilde 2, a...
PT-2020-22220
Name of the Vulnerable Software and Affected Versions dotnet affected versions not specified Description The issue is related to a heap-use-after-free READ 2 crash type. The crash state involves several function calls, including dotnet parse tilde 2, dotnet parse tilde, and dotnet parse com...
dotnet: Denial of service via untrusted input
An integer overflow condition was found in dotnet and dotnet3.1's BinaryReader Read7BitEncodedInt method. This method is used by BinaryReader's ReadString method, and given a certain input, and cause a denial of service to dotnet applications using BinaryReader. The exploitation of this flaw...
dotnet: Denial of service via untrusted input
An integer overflow condition was found in dotnet and dotnet3.1's BinaryReader Read7BitEncodedInt method. This method is used by BinaryReader's ReadString method, and given a certain input, and cause a denial of service to dotnet applications using BinaryReader. The exploitation of this flaw...
dotnet3.1 security update
3.1.104-2.0.2 - Update patch to support 8.2 [email protected] 3.1.104-2.0.1 - support OL release scheme [email protected] 3.1.104-2 - Update to new release - Resolves: RHBZ1833091 3.1.104-1 - Update to .NET Core Runtime 3.1.4 and SDK 3.1.104 - Resolves: RHBZ1833091...
.NET Core DoS
The vulnerability of the .NET Core software platform is related to errors in handling web requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Important: Red Hat Security Advisory: dotnet3.1 security update
An update for dotnet3.1 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
dotnet: Denial of service via untrusted input
An integer overflow condition was found in dotnet and dotnet3.1's BinaryReader Read7BitEncodedInt method. This method is used by BinaryReader's ReadString method, and given a certain input, and cause a denial of service to dotnet applications using BinaryReader. The exploitation of this flaw...